Privacy Policy

CertTrack is operated by JustServicesPro Management & Consulting Ltd ("JCML", "we", "us", or "our"), based in Maitama Ext., Abuja, Nigeria. This policy explains what personal data we collect through CertTrack, why we collect it, and how it's handled.

We collect the following categories of data:

• Account data — name, email, phone number, role, and organisation details for admins, trainers, and students.
• Cohort and course data — attendance records, quiz scores, enrolment status, and completion dates entered by organisations using the Service.
• Certificate data — course name, issue date, and a unique certificate code, made available on a public verification page accessible via QR code.
• Payment data — processed directly by our payment partner, Flutterwave. We receive confirmation of payment and subscription status, not full card or bank details.
• Usage data — log data such as IP address, browser type, and pages visited, used for security and service improvement.

We use collected data to:

• Provide and operate the Service, including cohort management, attendance tracking, and certificate issuance.
• Generate and verify certificates via public verification pages.
• Process payments and manage subscriptions.
• Send transactional emails — invites, certificate delivery, password resets, billing notices.
• Maintain security, detect fraud, and prevent misuse of the Service.
• Improve the Service based on aggregated, non-identifying usage patterns.

We do not sell personal data, and we do not use student data for advertising.

Within an organisation's account, admins and trainers can see the student data relevant to their cohorts and courses (names, attendance, scores, certificate status). Students can see their own records and certificates through the student portal.

Certificate verification pages are public by design — anyone with the certificate's QR code or verification link can confirm a certificate's authenticity, course name, and issue date. This is a core feature of the Service and is what makes certificates verifiable.

We share data with service providers who help us operate CertTrack, including Supabase (database and authentication), Flutterwave (payments), and our email delivery provider. These providers only process data on our behalf and under contractual confidentiality obligations.

We do not share personal data with third parties for their own marketing purposes.

We retain account and cohort data for as long as an organisation's account is active, and for a reasonable period afterward to allow certificate verification to continue working, satisfy legal obligations, and resolve disputes. Organisations can request deletion of their data, subject to certificate verification records that may need to persist for authenticity purposes.

We use industry-standard measures to protect data, including encrypted connections, row-level security on our database, and restricted access to production systems. No system is perfectly secure, and we encourage organisations to use strong, unique passwords and to report any suspected security issue to info@justservices.pro.

Depending on your location, you may have rights to access, correct, or request deletion of your personal data, or to object to certain processing. Students and trainers whose organisation manages their record should generally contact that organisation first, since they control the underlying data; organisations can reach us directly at info@justservices.pro for account-level requests.

We use essential cookies required for authentication and session management. We do not currently use third-party advertising or tracking cookies.

Our infrastructure providers may process data outside Nigeria. Where this occurs, we rely on providers with appropriate security and contractual safeguards for cross-border data handling.

CertTrack is intended for use by training organisations, trainers, and adult students. Where an organisation enrols minors as students, that organisation is responsible for obtaining any necessary parental or guardian consent required under applicable law before submitting the minor's data to the Service.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email before they take effect.

For privacy questions or requests, contact us at info@justservices.pro, by WhatsApp at +234 807 992 6755, or by mail to JustServicesPro Management & Consulting Ltd, JCML Offices, Maitama Ext., Abuja, Nigeria.